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IN THE CLAIMS: 

Please amend claim 1, cancel claim 6, and add new claims 19-21 as provided 

below. 

1 . (Currently Amended) A network interface system for interfacing a host 
system with a network to provide outgoing data from the host system to the network and 
to provide incoming data from the network to the host system, the network interface 
system comprising: 

a bus interface system adapted to be coupled with a host bus in 
the host system and transfer data between the network interface system and 
the host system; 

a media access control system adapted to be coupled with the 
network and to transfer data between the network interface system and the 
network; 

a memory system coupled with the bus interface system and the media access 
control system, the memory system being adapted to store incoming and outgoing data 
being transferred between the network and the host system; and 

a security system coupled with the memory system, the security system being 
adapted to selectively encrypt outgoing data and to selectively decrypt incoming data, 

wherein the processors each comprise pipelines for ESP encryption, ESP 
authentication, and AH authentication; 

and wherein the security system comprises first and second processors for 
encrypting the outgoing data the first and second processors each being operable 
independent of one another to encrypt the outgoing data, the security system being 
configured to send an outgoing data packet to the first processor then a subsequent 
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outgoing data packet to the second processor, then a further subsequent outgoing data 
packet to the first processor, and continuing in this alternating manner, for encryption. 

2. (Original) The network interface system of claim 1 , wherein the two 
processors are also operable to authenticate the outgoing data. 

3. (Original) The network interface system of claim 1 , wherein the two 
processors are functionally identical. 

4. (Original) The network interface system of claim 1 , wherein the security 
system further comprises two input buffers coupled with the memory system, each input 
buffer being coupled to one of the processors, and the security system is adapted to 
direct outgoing data packets read from the memory system alternately to one or the 
other input buffer. 

5. (Original) The network interface system of claim 1 , wherein the security 
system further comprises two output buffers coupled with the memory system, each 
output buffer being coupled to one of the processors, the processors being configured 
to write processed data packets to the output buffers, and the security system being 
configured to transfer the process data packets from the output buffers to the memory 
system in the same order the data packets were read from the memory system prior to 
processing. 

6. (Cancelled) 

7. (Original) The network interface system of claim 1 , wherein the processors 
comprise pipelines implementing an algorithm selected from the group consisting of the 
HMAC-MD5-96 algorithm and the HMAC-SHA-1-96 algorithm. 
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8. (Original) The network interface system of claim 1 , wherein the processors 
comprise pipelines implementing an algorithm selected from the group consisting of the 
DES-CBC, the 3DES-CBC, and the AES-CBC encryption algorithms. 

9. (Previously Presented) The network interface system of claim 1 , wherein 
the security system further comprises a processor to selectively decrypt incoming data, 
wherein the security system comprises more than one processor for encrypting and 
authenticating outgoing data and one processor for decrypting incoming data. 

1 0. (Original) The network interface system of claim 1 , wherein the bus 
interface system, the media access control system, the memory system, and the 
security system, are included within a single integrated circuit. 

1 1 . (Cancelled) 

12. (Cancelled) 

13. (Cancelled) 

14. (Cancelled) 

15. (Cancelled) 

16. (Cancelled) 

17. (Cancelled) 



18. 



(Cancelled) 
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1 9. (New) The network interface system of claim 1 , further comprising a 
transmit output data flow controller configured to control the flow of encrypted data from 
the first and second processors to the memory system in the same order as the order in 
which the data was read from the memory system. 

20. (New) The network interface system of claim 1 , wherein the memory 
system comprises: 

a first memory coupled with the bus interface system and the security system for 
storage of outgoing data prior to encryption and incoming data after decryption; and 

a second memory coupled with the media access control system and the security 
system for storage of incoming data prior to decryption and outgoing data after 
encryption; 

wherein the first and second memories comprise different memory locations. 

21 . (New) The network interface system of claim 1 , wherein the memory 
system comprises a unitary memory system partitioned into first and second memory 
areas. 



